2202 matches found
CVE-2017-1464
IBM TRIRIGA is affected by CVE-2017-1464 due to the failure to enable HTTP Strict Transport Security (HSTS), enabling a remote attacker to obtain sensitive information via man-in-the-middle techniques. Affected IBM TRIRIGA Platform versions include 3.5.0–3.5.3.0, 3.4.0–3.4.2.5, and 3.3.0–3.3.2.5....
CVE-2020-20353
CVE-2020-20353: IBM WebSphere Application Server in IBM Cloud is affected by an XML External Entity (XXE) Injection vulnerability. Affected product: IBM WebSphere Application Server in IBM Cloud (WebSphere Application Server 9.0 and 8.5). The IBM bulletin directs readers to the security bulletin(...
CVE-2019-4610
CVE-2019-4610 affects IBM Cloud Private Identity and Access Management. The IBM bulletin states the issue arises from use of an API key that grants access to a resource type, enabling an authenticated attacker to access other resources of the same type beyond the intended scope. Affected product/...
CVE-2019-4445
IBM Security Bulletin aggregates CVE-2019-4445 under the IBM Rational CLM/RQM/RTC family. Affected products and versions include Rational CLM 6.0–6.0.6.1, Rational Quality Manager 6.0–6.0.6.1, Rational Team Concert 6.0–6.0.6.1, Rational DOORS Next Generation 6.0–6.0.6.1, Rational Engineering Life...
CVE-2020-4538
CVE-2020-4538 affects IBM Security Identity Manager (ISIM) 6.0.0. The vulnerability arises from reuse of another user’s JSESSIONID, enabling a privileged local user to perform unauthorized actions. IBM's bulletin confirms the issue and assigns a CVSS Base score of 6.7. Remediation provided: upgra...
CVE-2019-4677
IBM Security Identity Manager is affected by CVE-2019-4677 due to a cross-site scripting vulnerability in the Web UI. The bulletin specifies IBM Security Identity Manager 6.0.0 as affected, with the fix available in version 6.0.0-ISS-SIM-FP0023. The vulnerability allows embedding arbitrary JavaSc...
CVE-2020-4939
IBM Jazz for Service Management (JazzSM) is vulnerable to Stored Cross-Site Scripting (CVE-2020-4939) affecting WebGUI 8.1.0 GA/FP and JazzSM 1.1.3. The vulnerability allows embedding arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session. A fix...
CVE-2017-1547
CVE-2017-1547 affects IBM Emptoris Services Procurement. The vulnerability enables username enumeration through the forgot-password flow, allowing an attacker to determine valid usernames and potentially brute-force credentials. This concerns IBM Emptoris Services Procurement 10.0.0.x. Root cause...
CVE-2011-0068
CVE-2011-0068: The connected documentation details memory safety issues in Firefox’s WebGL/WebGLES components that could be exploited to run arbitrary code. Mozilla’s MFSA 2011-17 describes two crashes in WebGL/WebGLES that could be triggered to execute code, fixed in Firefox 4.0.1. OpenSUSE advi...
CVE-2012-0424
Technical details for CVE-2012-0424 are not provided in the supplied documents; the Initial Description is a placeholder. Monitor for updates from the sources.
CVE-2021-26976
Technical details for CVE-2021-26976 are not publicly available in the provided documents. Monitoring for updates is advised; no affected products, impact, or remediation are described in the supplied materials.
CVE-2020-26793
Technical details for CVE-2020-26793 are not publicly provided in the supplied documents; it is listed among Firefox vulnerabilities but no product/version/root-cause/impact data is included. Monitor for updates.
CVE-2021-28582
Adobe Photoshop is affected by a buffer overflow vulnerability (CVE-2021-28582) described in APSB21-38. The issue is reported to allow arbitrary code execution and is tied to Photoshop versions prior to 21.2.9/22.4.2 on Windows and macOS. Connected sources indicate a vulnerability in Photoshop (C...
CVE-2021-44184
Adobe Photoshop (Windows/macOS) versions 22.x prior to 22.5.4 and 23.x prior to 23.1 are affected by multiple vulnerabilities referenced in APSB21-113, including a buffer overflow (CVE-2021-44184) that can lead to arbitrary code execution. The issue stems from an out-of-bounds write (CVE-2021-430...
CVE-2022-24087
CVE-2022-24087 is the follow-on to CVE-2022-24086, an Improper Input Validation vulnerability in Adobe Commerce/Magento Open Source that enables pre-authenticated remote code execution. Connected sources indicate it affects Magento Open Source/Adobe Commerce 2.3.3-p1–2.3.7-p2 and 2.4.0–2.4.3-p1, ...
CVE-2022-03801
Concrete details found: CVE-2022-0380 affects the Fotobook WordPress plugin (versions up to 3.2.3). The vulnerability is a Reflected Cross‑Site Scripting (XSS) due to insufficient escaping and the use of $_SERVER['PHP_SELF'] in the options-fotobook.php file, enabling injection of arbitrary script...
CVE-2021-442255
CVE-2021-442255 is referenced in a Huawei EulerOS keepalived advisory (EulerOS-SA-2022-2565) affecting EulerOS Virtualization 3.0.6.0, where the keepalived component relies on IPVS for Layer4 load balancing. The connected OpenVAS/Nessus entries confirm the vulnerability association and assign a C...
CVE-2021-9983
CVE-2021-9983 is a vulnerability in WebKitGTK/WebKit2GTK (used by openSUSE/SUSE) that corresponds to an out-of-bounds write affecting webkit2gtk3. The connected advisories attribute the issue to a memory safety flaw in webkit2gtk3, with multiple vendors referencing CVE-2021-9983 among other CVEs....
CVE-2021-9948
CVE-2021-9948 is addressed in OpenSUSE/SUSE advisories for webkit2gtk3. The vulnerability is described as a type confusion in WebKitGTK that could lead to arbitrary code execution. Remediation is to upgrade webkit2gtk3 to version 2.30.3 (as part of openSUSE/SLE updates in 2020-2021 cycles), with ...